IAG Engineer at Tiger Brands

• The IAG Engineer is responsible for designing, implementing, and operating Identity Governance and Administration controls to ensure that user access to systems, applications, and data is appropriate, approved, auditable, and compliant.The role focuses on access lifecycle management, role governance, certifications, SoD controls, and compliance reporting, reducing identity‑related risk across the organisation

WHAT YOU WILL DO:

IAG Platform Engineering & Operations

• Design, implement, and maintain IAG solutions (e.g. SailPoint, Saviynt, One Identity, Microsoft Entra ID Governance).
• Configure identity lifecycle workflows (joiner, mover, leaver).
• Manage connectors and integrations with:  Active Directory / Entra ID, HR systems, Business applications, Cloud platforms
• Ensure stability, performance, and scalability of the IAG platform.

Identity Lifecycle & Access Provisioning

• Automate user access provisioning and de‑provisioning based on identity attributes.
• Ensure timely removal of access for terminated or role‑changed users.
• Implement least‑privilege access models.
• Reduce manual access administration and human error.

Role Management & Access Models

• Design and maintain: Business roles, IT roles, Entitlement models
• Perform role mining and optimisation.
• Ensure role definitions align with business functions and risk tolerance.
• Reduce access complexity and role sprawl.

Access Reviews & Certifications

• Configure and manage access certification campaigns for:  User access, Privileged access, Application and data access
• Support managers and application owners during reviews.
• Track review completion, exceptions, and remediation.
• Provide audit‑ready evidence of access approvals.

Automation & Continuous Improvement

• Automate IAG processes using APIs, workflows, and scripts.
• Improve access request and approval user experience.
• Identify opportunities to reduce operational overhead.
• Support roadmap development for IAM maturity.

Stake Holder Engagement

• Work with HR, IT, Security, Risk, Audit, and Application Owners. 
• Translate governance requirements into technical controls. P
• Provide guidance and awareness on identity governance practices

WHAT YOU WILL BRING TO THE TABLE:

• Identity Lifecycle Management Effectiveness
• Access Governance and Least Privilege
• Role and Entitlement Model Quality
• Access Review Certifications
• Compliance Audit and Control Effectiveness
• Platform Stability and Operational  Effectiveness 

Minimum Education

• Bachelor’s degree in computer science, Information Systems or related field 

Required skills and experience:

• Experience with IAG platforms (SailPoint, Saviynt, One Identity, Entra ID Governance). 

Strong understanding of: 

• Identity lifecycle management
• Access provisioning models
• Role‑based access control (RBAC)
• Directory services (Active Directory, LDAP). 

Experience

• 5+ years as a PAM engineer

Soft Kills

• Strong analytical and problem‑solving skills. 
• Ability to work with business and technical stakeholders. 
• Clear documentation and communication skills. 
• Detail‑oriented with a risk‑based mindset.